837b691467ff89a8d982abf56069adc7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

837b691467ff89a8d982abf56069adc7_JaffaCakes118
Size

83KB
MD5

837b691467ff89a8d982abf56069adc7
SHA1

016798d938aa37a190a93121a8e9b5e4035205a0
SHA256

1736990aa5843e24c2d8cfb6158ff3b3c4dfa13427ba2ab8afcaf6b051839b75
SHA512

cde86f7a4305581e5314b594a4a9a2a4bdf34b654e93a24a08333d1c815c04ff81e6347adcab25e65a895f1a9d5a88c8d0863af6addb8373ca0a8d503bc9d46e
SSDEEP

1536:owpW9UaDLSvuQUE6UdYwiSSgOkflWWtRSDLnwAp16l37Il74k4ie48CaYKDxqJ5X:JW9UaDuvlwU2KSgrcWtReK1qJ5X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
837b691467ff89a8d982abf56069adc7_JaffaCakes118

Files

837b691467ff89a8d982abf56069adc7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ